Privacy Policy

This Privacy Policy explains how Brainwizard Solutions Private Limited (“Brainwiz”, “we”, “us”, “our”) collects, uses, shares and protects personal data when you visit www.brainwiz.in or use our programmes, including the Brainwiz AI Assessment (together, the “Services”).

We process personal data in accordance with the Digital Personal Data Protection Act, 2023 (“DPDP Act”), the Information Technology Act, 2000 and the rules made under them. Our services for children are purchased and managed by a parent or lawful guardian. Please also read our Child Data & Safety page, which explains in plain language how we protect children who take the assessment.

1. Who is responsible for your data

Brainwizard Solutions Private Limited is the Data Fiduciary for personal data processed through the Services. Our contact details are at the end of this policy.

2. Data we collect

From parents and guardians

• Name, email address and phone number.
• Billing details needed to complete a purchase (payments are processed by our payment partner; we do not store your full card or bank details).
• Your consent records and communication preferences.
• Messages you send us, such as support requests.

About the child taking the assessment

• First name (or a nickname), age and class/grade.
• Assessment interactions: the questions your child asks the AI companion, their answers, edits and choices, and timing information such as how long a task took.
• The scores, observations and report we generate from those interactions.

We do not ask children for their home address, phone number, photographs, school ID or other contact details, and we ask children not to share such information during the assessment.

Collected automatically

• Device and browser type, IP address, approximate location (city level) and pages visited.
• Essential cookies needed for the website and assessment to work, and basic analytics about website usage.

3. How we use data

• To deliver the assessment and generate your child’s personalised report.
• To create and manage your account, process payments and send receipts.
• To send you service messages, such as access links, reminders and report delivery.
• To provide support and respond to your requests.
• To maintain the quality, fairness and safety of the assessment, using de-identified or aggregated data wherever possible.
• To prevent fraud and misuse, and to meet our legal obligations.
• To send you updates about our programmes, only where you have opted in. You can unsubscribe at any time.

We do not sell personal data. We do not use children’s data for advertising, profiling for marketing, or behavioural tracking.

4. Legal basis and consent

We process personal data on the basis of your consent and for the legitimate uses permitted under the DPDP Act. For children under 18, we obtain verifiable consent from the parent or lawful guardian before the child takes the assessment. You may withdraw consent at any time by writing to us; withdrawal does not affect processing carried out before it.

5. How AI is used

The assessment uses AI models, which may be provided by third-party technology partners, to power the AI companion and to help analyse responses. We share only the data needed for that purpose, under contracts that prohibit our partners from using it to train their own models or for any other purpose. Reports are generated using a defined framework and reviewed for quality. The assessment is an educational and developmental tool, not an IQ test or a clinical or psychological diagnosis.

6. Who we share data with

• Service providers who help us run the Services: hosting, payment processing, email delivery, analytics and AI technology partners. They act on our instructions and are bound by confidentiality and security obligations.
• Your child’s school, only if you explicitly ask us to or give separate consent.
• Authorities, where required by law or to protect the safety of a child or others.

Some of our service providers may process data outside India. Where this happens, we take steps to ensure the data is protected to the standard required by Indian law.

7. How long we keep data

We keep assessment interactions and reports for up to 24 months from the date of the assessment, so you can access the report and compare progress if your child retakes it. After that, we delete the data or anonymise it so it can no longer identify your child. Billing records are kept for as long as tax and accounting laws require. You can ask us to delete data sooner (see section 9).

8. How we protect data

We use reasonable security practices, including encryption in transit, access controls limited to authorised staff, and regular review of our systems and providers. No online service can be completely secure, but we work to protect your data and will notify you and the relevant authorities of a personal data breach as required by law.

9. Your rights

As a parent or guardian, you can ask us to:

• Give you a summary of the personal data we hold about you and your child and how it is used.
• Correct inaccurate or incomplete data.
• Delete your or your child’s data, unless we must keep it by law.
• Withdraw consent for processing.
• Nominate another person to exercise these rights in the event of your death or incapacity.

Email us at info@brainwiz.in with “Data request” in the subject line. We may need to verify your identity before acting on a request, and will respond within the time required by law.

10. Cookies

We use essential cookies to keep the website and assessment working, and analytics (Vercel Web Analytics and Google Analytics) to understand how the website is used. On our public web pages we also use the Meta Pixel, which tells Meta (Facebook/Instagram) when someone visits, starts a booking or completes a purchase, so we can measure and improve our advertising to parents. We do not send names, contact details or any information about your child to Meta, and the Meta Pixel is not used within the assessment itself. You can control cookies through your browser settings and manage ad preferences in your Meta account; blocking essential cookies may stop parts of the Services from working.

11. Changes to this policy

We may update this policy from time to time. We will post the updated version on this page with a new “Last updated” date, and notify you by email about significant changes.

12. Grievance Officer and contact

If you have a question or complaint about how we handle personal data, please contact our Grievance Officer. We will acknowledge your complaint within 48 hours and aim to resolve it within 30 days. If you are not satisfied with our response, you may approach the Data Protection Board of India.